CVE-2024-45193

概要

参考情報

• gitlab.matrix.org/matrix-org/olm · Product
• gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985 · Patch
• news.ycombinator.com/item · Issue Tracking
• soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library · Exploit

olm のその他の脆弱性

• CVE-2024-45192中 5.3An issue was discovered in Matrix libolm through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session key…
• CVE-2024-45191中 5.3An issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes.…
• CVE-2021-44538緊急 9.8The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryp…
• CVE-2021-34813緊急 9.8Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room …